Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a373030303a3a2f33392d3339203d3e20323032373336.roa
File:                     326130363a313238373a373030303a3a2f33392d3339203d3e20323032373336.roa (raw, json)
Hash identifier:          nCTsg15Ipo4l7lxevtLJdES2lHGpnxsUWO37RI4Yz+c=
Subject key identifier:   8C:47:32:CB:96:4C:75:BF:82:B4:5E:12:60:5D:BF:B8:F6:02:A1:12
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3B9994039787AE687D14D449EF030BCF093C8366
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a373030303a3a2f33392d3339203d3e20323032373336.roa
Signing time:             Fri 14 Apr 2023 01:48:04 +0000
ROA not before:           Fri 14 Apr 2023 01:43:04 +0000
ROA not after:            Fri 12 Apr 2024 01:48:04 +0000
asID:                     202736
IP address blocks:        2a06:1287:7000::/39 maxlen: 39

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:94:03:97:87:ae:68:7d:14:d4:49:ef:03:0b:cf:09:3c:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Apr 14 01:43:04 2023 GMT
            Not After : Apr 12 01:48:04 2024 GMT
        Subject: CN=8C4732CB964C75BF82B45E12605DBFB8F602A112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:c6:bb:12:2b:77:2b:e9:23:5c:6e:8a:fc:
                    76:36:2a:1f:1e:4a:0d:b8:a1:27:36:a3:da:18:b3:
                    ea:8a:46:80:3d:3a:ba:f5:74:cc:1e:44:3f:66:31:
                    f4:86:3e:ba:19:4d:b0:31:12:b0:63:0d:58:ae:2f:
                    57:dd:7a:1d:71:5a:1f:42:a9:da:29:10:c9:89:d7:
                    ea:21:cd:e5:64:82:8d:16:2b:ee:19:0f:08:5e:df:
                    ab:2a:9f:e2:01:36:5c:25:a1:62:a4:88:4d:eb:f7:
                    cb:40:1f:9e:43:32:8b:30:b1:b1:61:ff:7d:d3:24:
                    2c:c6:e7:8c:f8:8a:95:b4:ba:3a:2e:d2:f6:c9:19:
                    d7:06:d4:95:69:d8:3c:d5:60:b4:a7:c6:af:2e:02:
                    39:a0:0a:da:b1:ca:da:9c:4d:30:69:c8:dc:2b:fa:
                    1c:5e:be:9a:05:78:76:6c:4d:83:69:74:d1:44:46:
                    65:64:3b:06:2a:6d:f1:43:f5:3b:6e:ff:e8:5d:3d:
                    56:3b:ef:86:b6:30:88:58:71:4e:f4:62:fc:50:b3:
                    b9:02:0a:75:62:51:01:1c:13:5d:88:07:8f:4d:c1:
                    7c:c5:f2:33:67:df:c2:ad:d4:07:33:af:c9:75:04:
                    8e:f5:a3:55:0f:ee:13:c9:1c:9d:f2:86:4a:a7:33:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:32:CB:96:4C:75:BF:82:B4:5E:12:60:5D:BF:B8:F6:02:A1:12
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a373030303a3a2f33392d3339203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:7000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:81:2f:2e:0d:bb:02:85:0f:be:1a:9b:cf:bc:ee:e9:4b:
         b0:fd:74:3c:0d:b8:18:c0:42:96:08:1b:4a:f8:0d:ad:ea:90:
         a7:d8:62:4b:89:6f:65:a6:87:e7:f6:ad:28:06:b1:6d:f8:54:
         45:5d:67:63:f9:77:73:b4:58:99:6c:f9:ad:3d:46:9f:12:c3:
         3e:a0:4e:fb:71:5f:a5:2f:2b:b3:5c:bc:02:af:ad:3c:12:d0:
         18:e2:83:40:c6:01:82:a0:0c:1b:5a:3e:07:59:53:1b:7c:df:
         0f:00:a6:e8:ae:d8:dd:ab:82:99:ea:8b:28:63:8f:0d:a9:3e:
         e1:e4:0e:44:c0:65:e5:56:51:d6:23:cd:13:20:3c:51:c4:5a:
         a3:3f:d7:58:26:91:79:37:40:d0:c5:24:e2:3f:b9:b1:8d:67:
         98:e7:7f:48:28:cc:a5:7e:6a:79:88:e0:f5:6d:24:6d:c7:f5:
         e7:3c:ad:90:43:66:84:4c:d9:13:3a:7b:18:d4:a5:44:55:29:
         7f:c8:29:1e:e9:18:e0:1c:e3:8e:c8:f6:0d:84:a6:f2:68:72:
         45:49:36:35:ef:67:28:e1:96:e2:a9:66:5d:46:62:b3:73:ec:
         c8:dd:4c:12:f3:64:fc:3c:7b:4e:93:e1:9e:8c:a7:50:2b:01:
         aa:ad:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----